d9728e6cb693fe465501e14548f1733c2d13970642be6849ac8061d38449caac

Sharing

Copy URL Twitter E-mail

General

Target

d9728e6cb693fe465501e14548f1733c2d13970642be6849ac8061d38449caac
Size

334KB
MD5

224673e346da59c63ca030177993d6a0
SHA1

9abc13992da09bfe6a3793c812f153128a6bd54e
SHA256

d9728e6cb693fe465501e14548f1733c2d13970642be6849ac8061d38449caac
SHA512

0deb89bf68607ed047c084b4ba866a27dab6eed1c669632b34098bed8d7e765bcd5f5fcfa12e0e4a232fd954e13f2544fa0362f588902bda9e7b27b65cd66f0a
SSDEEP

6144:NLZXQ6GZQqhLwk5CUjSCQeVEsI4/UAj7uobeP3KWsTzo16KPoKrLhwT:NFfSQqZLhQEEo/l3bePVao8KP1rtwT

Score

N/A

Malware Config

Signatures

Files

d9728e6cb693fe465501e14548f1733c2d13970642be6849ac8061d38449caac
.exe windows x86

167c39f30a0971a33b8545f8e6fe8327

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

swprintf
_vsnprintf
_onexit
__dllonexit
_except_handler3
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_adjust_fdiv
_initterm
_wtol
wcsstr
_wtoi
strchr
_wcsnicmp
_ftol
memset
strcmp
memmove
wcscmp
__RTDynamicCast
_purecall
realloc
__CxxFrameHandler
malloc
??2@YAPAXI@Z
free
??3@YAXPAX@Z

ntdll

NtFlushBuffersFile
NtGetPlugPlayEvent
NtReleaseSemaphore
NtDeleteKey
NtQueryMultipleValueKey
NtQueryObject
NtOpenProcessToken
NtQuerySystemInformation

kernel32

lstrlenW
GetModuleHandleW
IsBadWritePtr
GetProcAddress
TlsFree
LoadLibraryW
GetStdHandle
IsBadReadPtr
LocalFree
FreeLibrary
lstrcpynW
GetACP
TryEnterCriticalSection
GetModuleHandleA
lstrcmpW
TlsSetValue
CreateFileA
IsBadStringPtrW
lstrcpyW
QueryPerformanceCounter
GetTickCount
QueryPerformanceFrequency
TlsAlloc
CloseHandle
ReadFile
GetSystemTimeAsFileTime
LoadLibraryA
GetWindowsDirectoryW
FindAtomA
GetUserDefaultLCID
SetEvent
GetSystemDefaultUILanguage
LCMapStringW
AreFileApisANSI
GetVersion
OpenEventA
GlobalFree
FindResourceExW
HeapDestroy
RegisterWaitForSingleObject
GetCurrentProcessId
PulseEvent
UnregisterWait
CreateEventW
OutputDebugStringA
FindResourceExA
lstrcatA
GetLocalTime
HeapAlloc
GetProcessHeap
CreateSemaphoreA
InterlockedExchange
SetLastError
FindResourceW
CreateMutexA
HeapFree
GetConsoleOutputCP
TlsGetValue
GetSystemDefaultLCID
UnregisterWaitEx
FindClose
WaitForSingleObject
WaitForMultipleObjects
CreateThread
QueueUserWorkItem
lstrlenA
CreateSemaphoreW
WideCharToMultiByte
GetEnvironmentStringsA
MultiByteToWideChar
GetCurrentProcess
GetComputerNameW
OpenEventW
GetLastError
InterlockedDecrement
VirtualAlloc
InterlockedIncrement
GetTempPathA
DeleteCriticalSection
GetUserDefaultUILanguage
GetCurrentDirectoryA
Sleep
GetCommandLineW
InitializeCriticalSection
FreeEnvironmentStringsA
InterlockedCompareExchange
GetOEMCP
GetCurrentThreadId
GlobalAlloc
GetThreadLocale
EnterCriticalSection
SleepEx
LeaveCriticalSection
IsSystemResumeAutomatic
OpenMutexA
GetLogicalDrives
HeapCreate
GetTempFileNameA
LocalAlloc
DisableThreadLibraryCalls

ole32

CoInitializeEx
CoUninitialize
IIDFromString
StringFromIID
CoCreateFreeThreadedMarshaler
CreateBindCtx
CLSIDFromString
StringFromCLSID
CoTaskMemFree
CoCreateInstance
StringFromGUID2

ws2_32

WSAIoctl
WSASocketW

advapi32

RegOpenKeyExW
RegQueryInfoKeyA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegEnumValueA
GetUserNameW
RegQueryValueExW

user32

FindWindowA
CreateWindowExA
GetInputState
ReleaseDC
GetWindowLongW
GetCaretBlinkTime
GetMessageA
UnregisterClassW
DestroyWindow
DispatchMessageW
UnregisterClassA
GetSystemMetrics
TranslateMessage
GetDC
PostQuitMessage
PeekMessageW
GetClipboardViewer
GetSysColor
UnregisterDeviceNotification
UpdateWindow
GetDesktopWindow
GetCapture
MsgWaitForMultipleObjectsEx
RegisterDeviceNotificationW
GetForegroundWindow
GetActiveWindow
GetProcessDefaultLayout
CreateWindowExW
RegisterClassW
DefWindowProcW
LoadStringW
LoadIconA
DispatchMessageA
DefWindowProcA
wsprintfA
SetWindowLongW

winmm

mixerGetLineControlsA
mixerClose
mixerOpen
mixerGetControlDetailsA
timeGetTime

rtutils

TraceRegisterExW
TraceVprintfExA
TraceDeregisterW

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 198KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 13KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

167c39f30a0971a33b8545f8e6fe8327

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

ntdll

kernel32

ole32

ws2_32

advapi32

user32

winmm

rtutils

Sections

.text Size: 59KB - Virtual size: 59KB

.rdata Size: 44KB - Virtual size: 43KB

.data Size: 198KB - Virtual size: 254KB

.bss Size: - Virtual size: 13KB

.rsrc Size: 29KB - Virtual size: 29KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 59KB - Virtual size: 59KB

.rdata
Size: 44KB - Virtual size: 43KB

.data
Size: 198KB - Virtual size: 254KB

.bss
Size: - Virtual size: 13KB

.rsrc
Size: 29KB - Virtual size: 29KB

.reloc
Size: 3KB - Virtual size: 2KB